Providing consistent security information

Patent metadata

Field	Value
Publication number	US-9432401-B2
Application number	US-201213542666-A
Country	US
Kind code	B2
Filing date	Jul 6, 2012
Priority date	Jul 6, 2012
Publication date	Aug 30, 2016
Grant date	Aug 30, 2016

Abstract

A method for providing consistent security information between multiple applications is described herein. The method includes detecting potentially deceptive content from a communication application in a browser application. The method also includes generating consistent security information for the potentially deceptive content with the browser application. Additionally, the method includes sending the consistent security information for the potentially deceptive content to the communication application. Furthermore, the method includes providing a warning based on the consistent security information to the communication application.

First claim

What is claimed is:

1. A method of providing consistent security information between multiple applications, comprising:
detecting potentially deceptive content from a communication application in a browser application;
generating the consistent security information for the potentially deceptive content with the browser application;
sending the consistent security information for the potentially deceptive content to the communication application; and
providing a warning from the browser application to the communication application, from which the potentially deceptive content is detected, based on the consistent security information to allow the warning to be displayed within the communication application, wherein the consistent security information is to prevent the warning from the browser application from conflicting with a separate warning from the communication application.

2. The method of claim 1 , wherein the communication application comprises an email application.

3. The method of claim 2 , wherein the email application comprises a webmail application server.

4. The method of claim 1 , wherein generating the consistent security information for the potentially deceptive content comprises:
sending the potentially deceptive content to a reputation server;
retrieving a reputation for the potentially deceptive content from the reputation server;
storing the reputation as the consistent security information.

5. The method of claim 1 , wherein the communication application comprises a social media application.

6. The method of claim 1 , wherein generating the consistent security information of the potentially deceptive content comprises detecting a misleading uniform resource locator.

7. The method of claim 1 , wherein the consistent security information indicates the potentially deceptive content is a known safe source, a known deceptive source, or an unknown source.

8. The method of claim 1 , wherein detecting the potentially deceptive content from the communication application comprises evaluating the potentially deceptive content based on previously evaluated hyperlinks.

9. A system for providing consistent security information comprising:
a display device to display potentially deceptive content;
a processor to execute processor executable code;
a storage device that stores processor executable code, wherein the processor executable code, when executed by the processor, causes the processor to:
detect potentially deceptive content from a communication application with a browser application, the potentially deceptive content comprising a hyperlink;
generate consistent security information for the potentially deceptive content with the browser application;
store a reputation as consistent security information;
send the consistent security information of the potentially deceptive content to the communication application; and
provide a warning from the browser application to the communication application, from which the potentially deceptive content is detected, based on the consistent security information to allow the warning to be displayed within the communication application, wherein the consistent security information is to prevent the warning from the browser application from conflicting with a separate warning from the communication application.

10. The system of claim 9 , wherein the communication application comprises an email application.

11. The system of claim 10 , wherein the email application comprises a webmail application server.

12. The system of claim 9 , wherein the reputation indicates the potentially deceptive content is a safe source, a known deceptive source, or an unknown source.

Assignees

• Douceur John R
• Parno Bryan
• Reeder Robert W
• Microsoft Technology Licensing Llc

Inventors

• Douceur John R
• Parno Bryan
• Reeder Robert W

Classifications

• H04L63/1483 Primary

  service impersonation, e.g. phishing, pharming or web spoofing (detection of rogue wireless access points H04W12/12) · CPC title

• G06F2221/2119

  Authenticating web pages, e.g. with suspicious links · CPC title

• G06F21/51 Primary

  at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability · CPC title